Crypto trader @sillytuna was reportedly robbed of about $24 million in a violent “wrench attack.”
According to reports, attackers abducted and threatened him physically to force access to his crypto holdings. The incident highlights that physical coercion can bypass even strong digital security.
The Incident: Physical Violence Over Phishing
On March 4, 2024, the victim was targeted by armed assailants. Unlike a traditional cyber-hack, the perpetrators used physical force, kidnapping, and threats of sexual violence to compel the trader to authorize the transfer of his assets.
In a harrowing post on X (formerly Twitter), @sillytuna confirmed the ordeal, stating, “I am still alive, and my organs are intact.” The statement highlights the extreme brutality of the confrontation, marking a terrifying shift from digital theft to physical predatory crime.
Asset Breakdown and Attacker Wallets
The stolen assets consisted primarily of aEthUSDC (interest-bearing USDC on the Aave Protocol). The majority of the funds were moved in a single transaction.
According to on-chain data, the stolen funds were immediately converted into DAI stablecoins and distributed between two primary attacker wallets:
| Wallet Address | Current Balance |
0xdCA9F78a5740bd19D4652F877B7a10a6Ad3eC9C4 |
~$10M DAI |
0xd0c2C387A7F10CD1FBb1078FaCC834eC43c9dd3E |
~$10M DAI |
Total Loss: ~23.6 Million aEthUSDC (Value: $24M+)
Victim’s Wallet Address: 0x6fe0fab2164d8e0d03ad6a628e2af78624060322
On-Chain Evasion Tactics
Security firms PeckShield have issued alerts regarding the movement of these funds. The attackers are currently bridging small amounts to the Arbitrum network and utilizing the Hyperliquid platform to swap for Monero (XMR), a privacy coin that is notoriously difficult to trace.
While initial reports by PeckShield suggested an “address poisoning” attack, the victim clarified that it was a premeditated physical assault.
A Warning to Crypto Holders: The Rise of “Wrench Attacks”
This incident serves as a stark reminder that hardware wallets and multi-sig security cannot protect against real-world violence. A report by CertiK indicates that “wrench attacks” (physical coercion for crypto) increased by 75% in 2025.
This surge in physical threats is becoming a major concern for the industry. For more context on the current state of digital asset theft, the February 2026 crypto security report details how over $23 million was lost across various incidents just last month alone.
Critical Safety Measures (OPSEC):
- Privacy is Protection: Avoid disclosing large holdings or your net worth on social media.
- Location Security: Ensure your home address and real-time location are not leaked online.
- Anonymous Operations: High-net-worth individuals are encouraged to use anonymous accounts and limit the use of KYC-heavy exchanges where possible.
The victim, @sillytuna, has announced his permanent departure from the crypto space following the trauma. He has offered a 10% bounty for any recovered funds, even if the attackers choose to return the money voluntarily. International law enforcement and cybercrime units are currently investigating the trail of the privacy-focused transactions.
